← Database

CVE-2024-4995

CRITICAL CVSS: 9.8 Published: 2024-12-18 Modified: 2026-06-17

Description

Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects Wapro ERP Desktop versions before 9.00.0.

Affected Platforms

Unknown

Weakness Type

CWE-757, CWE-922

References